Valid NSE7_EFW-7.2 Dumps shared by ExamDiscuss.com for Helping Passing NSE7_EFW-7.2 Exam! ExamDiscuss.com now offer the newest NSE7_EFW-7.2 exam dumps, the ExamDiscuss.com NSE7_EFW-7.2 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com NSE7_EFW-7.2 dumps with Test Engine here:
Which statement about network processor (NP) offloading is true?
Correct Answer: A
Option A is correct because the FortiGate CPU offloads the first packets of TCP sessions to the NP for faster connection establishment and reduced CPU load1. This feature is called TCP offloading and it is enabled by default on FortiGate models with NP6 or higher2. Option B is incorrect because the NP does not provide IPS signature matching. The NP only handles the packet forwarding and encryption/decryption functions, while the IPS signature matching is performed by the content processor (CP) or the CPU3. Option C is incorrect because the command to disable the NP for each firewall policy is set np-acceleration disable, not set np-acceleration st to loose4. This command can be used to prevent certain traffic types from being offloaded to the NP, such as multicast, broadcast, or non-IP packets5. Option D is incorrect because the NP does not check the session key or IPSec SA. The NP only offloads the IPSec encryption/decryption and tunneling functions, while the session key and IPSec SA are managed by the CPU. Reference: = 1: TCP offloading 2: Network processors (NP6, NP6XLite, NP6Lite, and NP4) 3: Content processors (CP9, CP9XLite, CP9Lite) 4: Disabling NP offloading for firewall policies 5: NP hardware acceleration alters packet flow 6: IPSec VPN concepts
